Company
Date Published
Author
John Hammond
Word count
278
Language
English
Hacker News points
None

Summary

The Snyk Fetch the Flag CTF 2023 challenge, Audiopolis, involves a web app that claims to provide speech-to-text capability but is actually vulnerable to command injection. The player can exploit this vulnerability by using a program called text2wave to generate payloads and execute commands on the server-side application. By experimenting with different inputs, the player can find the right combination of characters to stall the page or print out the flag. The challenge requires creativity and persistence to solve.